[jboss-jira] [JBoss JIRA] Closed: (JBREM-941) SRP SASL integrity/confidentiality protection is failing
[ http://jira.jboss.com/jira/browse/JBREM-941?page=all ]
David Lloyd closed JBREM-941.
-----------------------------
Resolution: Won't Fix
SRP SASL is fatally flawed. The abandoned draft spec has logical errors in it that I
don't see as fixable without basically inventing our own spec. Switching to SSH seems
like the best option at this point.
SRP SASL integrity/confidentiality protection is failing
--------------------------------------------------------
Key: JBREM-941
URL: http://jira.jboss.com/jira/browse/JBREM-941
Project: JBoss Remoting
Issue Type: Bug
Security Level: Public(Everyone can see)
Reporter: David Lloyd
Fix For: 3.1.0.GA
See JrppConnection.java (getSaslProperties) - enable the commented-out line and watch SRP
blow up.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
http://jira.jboss.com/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira